General

  • Target

    m5772909.exe

  • Size

    205KB

  • MD5

    5a16e9c9de5b70d66d1072949994110d

  • SHA1

    3d1c3a43bf13ee34c6d507dbcb53572720ff4ebd

  • SHA256

    6f1ac9917ce37f083436eecfa64c19e74c10d2cce1fe5a8d4cd95152fab89284

  • SHA512

    2c1e6ec8d5ef375432e5a9a5c6c074ba1a074261e4fba26537cbf5a04e8c38fcf99cf08d24ece3f73d624279c192d56ae312f84d881321f0131d2498e7721c09

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • m5772909.exe
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections